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ABOUT FPF 


Future of Privacy Forum and the FPF Education and Innovation 
Foundation are non-profit organizations that serve as catalysts 
for privacy leadership and scholarship, advancing principled 
data practices in support of emerging technologies. 


2 FUTURE OF PRIVACY FORUM 


As technology evolves to touch 
all facets of life, one thing is clear: 
privacy matters. We believe that 
privacy and data protection are 
fundamental rights, no matter 
who you are and where in the 
world you reside.” 


Jules Polonetsky 


Chief Executive Officer, Future of Privacy Forum 


WORKSTREAMS 


As a global organization, our experts work in the United States, Europe, 
Israel, Singapore (and the broader Asia-Pacific region), Africa, and Latin 
America. Our team members take a multi-stakeholder approach to 
explore the challenges posed by emerging technologies and develop 
privacy protections, ethical norms, and workable best practices in the 
following workstreams and more: 


Ad Tech 
Al & Machine Learning 
Biometrics 
B2B Data Use 
Cybersecurity 
Federal & State Legislation 
Global 
Health & Wellness 
Immersive Tech 
Mobility & Location 
Open Banking 
Research & Ethics 
Youth & Education Privacy 
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FUTURE OF 
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FROM LEADERSHIP 


202 was a year filled with conflict between our evolving digital world and the protections 
needed to safeguard against the risks of data collection and use. It was a time of data 
protection regulation at the state level in the U.S. and in countries around the globe. We witnessed 
the deterioration of laws protecting health and autonomy in America’s highest court. Protections 
for children advanced, but sometimes at the expense of privacy. Issues like Al and immersive 
technologies seized the attention of the public and regulators. International data flows continue 
to face pressures, and global data protection issues are increasingly subject to demands for data 
localization and data sovereignty. 


These regulatory and even cultural moments have made us more steadfast in our dedication to 
advancing multi-stakeholder solutions that provide a pragmatic path forward for those seeking the 
benefits of technology and the protections needed to safeguard privacy. 


We've expanded our staff and regional focus to meet the challenges to support our global scope. 
We welcomed Josh Lee Kok Thong as the Managing Director for the Asia Pacific office, added a 
Lead Policy Analyst to track developments in Africa, and brought on two Senior Fellows to provide 
insights into Japan and Latin America. As cross-border privacy implications, civil rights, immersive 
technology, and Al became top of mind for the tech privacy world at-large, we responded by 
adding experts to the staff. We're proud to say that our team is at the forefront of these issue areas 
— and those that may emerge. You can learn more about our team at fpf.org/staff. 


We've also expanded our workstream portfolio to address the growing need of our stakeholders 
in areas such as immersive technologies and open banking, as well as expanded our work on 
biometrics, healthcare, in addition to our research and ethics issue areas. 


Itis a great pleasure to present the Future of Privacy Forum’s 2022 Annual Report, which chronicles 
our efforts in bringing together academics, advocates, government officials, and industry leaders to 
evaluate the utility of data uses, the effectiveness of safeguards, and strategies to mitigate risks. 


This work is impossible without the commitment of our board of directors, advisory board, 
corporate supporters, and foundation supporters. Thank you for your continued partnership. 


Jules Polonetsky Christopher Wolf 
CHIEF EXECUTIVE OFFICER BOARD CHAIR 


4 FUTURE OF PRIVACY FORUM 


U.S. Federal and State Legislation 


MOVING THE NEEDLE ON 
LEGISLATIVE EFFORTS 


FPF experts provide independent analysis of legislative and regulatory approaches to 
protecting privacy interests. FPF focuses on analyzing proposals in relation to existing 
privacy frameworks, sharing information on current data practices and technologies, 
and ensuring that data governance strategies are future-looking and adaptable. 


FPF engages with diverse stakeholders through reports, blog posts, webinars, and 
educational programs, understanding that robust and durable policy outcomes are 
achieved when all stakeholders understand the key technologies, business practices, 
and legal mechanisms available to regulate privacy and data protection. 
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Answering Agencies’ Call for Comments 


Addressing ‘Opt-Out Preference Signals’ 
On California Draft Privacy Regulations 


FPF filed comments with the California Privacy Protection 
Agency regarding the Agency’s initial set of draft regulations to 
implement the California Privacy Rights Act amendments to the 
California Consumer Privacy Act. 


FPF recommended that the Agency’s final regulations 
governing preference signals and the mechanisms that transmit 
signals (such as web browsers and plug-ins) include specific 
clarifications. 


Comments on Colorado Privacy Act 
Pre-Rulemaking Activity 


FPF filed comments with the Colorado Department 
of Law as part of the rulemaking under the Colorado 
Privacy Act (CPA). The CPA, which goes into effect in July 
2023, will establish important new data privacy rights, 
controls, and protections for individuals in Colorado. 


FPF’s comments were directed toward ensuring the 
regulations support the effective exercise of new privacy 
rights, maximize clarity for business and nonprofit 
compliance efforts, and promote interoperability with 
emerging U.S. and global privacy frameworks where 
appropriate, particularly where the CPA uses consistent 
language as other jurisdictions. 
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FPF Urges Federal Trade Commission to 
Craft Practical Privacy Rules in Response to 
Advance Notice of Proposed Rulemaking 


In November 2022, the FPF filed comments regarding the 
Federal Trade Commission’s Advance Notice of Proposed 
Rulemaking, recommending that the FTC prioritize practical 
rules that clearly define individuals’ rights and companies’ 
responsibilities — providing individuals with strong, enforceable 
rights and companies with greater clarity about their obligations 
under Section 5 of the FTC Act. 


A Major Legislative Priority In the Spotlight 


FPF has long supported a federal comprehensive consumer 
privacy law with one clear standard that provides consumers 
and communities with critical protections and industry with 
certainty and guidance. 


In June 2022, FPF's Senior Policy Counsel Bertram Lee 
testified before the U.S. House Energy and Commerce 
Subcommittee on Consumer Protection and Commerce 
hearing, “Protecting America’s Consumers: Bipartisan 
Legislation to Strengthen Data Privacy and Security” 
regarding the American Data Privacy and Protection Act 
(ADPPA), a bipartisan, bicameral privacy discussion draft bill. 
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Creating Impact with Expert Analysis 


Following the House Energy and Commerce Committee's vote to 
7 advance the American Data Privacy and Protection Act (ADPPA) 
nearly four weeks after the hearing where he served as a witness, 
==> Bertram Lee published an op-ed in The Hill that highlighted the 
\ civil protections underscored in the bill. That same day, FPF’s 
Stacey Gray had an op-ed published in Lawfare that outlined how 
ADPPA would surpass state protections. 


Federal privacy legislation that ‘The Bipartisan House Privacy Bill Would Surpass 


protects civil rights is critical State Protections 
for all Americans 


Waen mnanaa oo. 


Privacy Papers for Policymakers 


In February, FPF held the 12th annual Privacy 
Papers for Policymakers Awards, which 
recognizes leading privacy scholarship. The 
marquee event honors researchers and 
provides an opportunity for the papers to 
get socialized with policymakers in the U.S. 
Congress, at federal agencies, and with 
international data protection authorities. 


Colorado Attorney General Phil Weiser provided 
the keynote address. Six winning papers, an 
award-winning student paper, two honorable 
mentions, and a student honorable mention 
were selected by a diverse group of leading 
academics, advocates, and industry privacy 
professionals from FPF’s Advisory Board. 


During the virtual event, winners — Daniel 
Solove, Ben Green, Woody Hartzog, Neil 
Richards, Joris van Hoboken, Ronan Ó Fathaigh, 
Jie Wang, Shikun Zhang, and Norman Sadeh 

— provided brief remarks about their papers in 
facilitated discussions. 


Congresswoman Diana DeGette, Co-Chair of 
the Congressional Privacy Caucus, and Senator 
Ed Markey were honorary co-hosts. 
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BRINGING EXPERTS TOGETHER 


pl Open House During the 
IAPP Global Privacy Summit 


FPF welcomed over 200 attendees, 
including members, to our new offices 

in Washington, D.C., during IAPP Global 
Privacy Summit week in April 2022 to enjoy 
in-person networking since the pandemic. 


bèl Book Talk and Signing with 
Author Danielle Citron 


FPF was one of the first stops that Board 
Member Danielle Citron made for her 
book The Fight for Privacy: Protecting 
Dignity, Identity, and Love in the Digital 
Age. FPF hosted a Book Talk and signing 
at our offices. 
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Global 


REPORTS THAT IMPACT 
THE WORLD 


FPF tracks developments and provides analysis on policymaking and 
regulation around the world, led by our global offices and on-the-ground 
experts in Europe, Asia Pacific, Israel, Africa, Latin America, and India. 
Through this work, we can keep our stakeholders informed of relevant 
changes, case law, guidance, policies, and legal requirements, while also 
providing background and in-depth analysis to support them in being 
ahead of key developments globally. 
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ai LER 


Philippines 


The APAC region is presently undergoing a period of 
intensive law reform. FPF’s APAC Comparative Report 
provides an opportunity for lawmakers, governments, 
and regulators who draft, review or implement 

data protection laws to have a comprehensive 
overview and analysis of notice, consent, and related 
requirements that operate in the data protection 
frameworks of their respective jurisdictions, regional 
partners, and neighbors. We hope the report serves 
as a catalyst for initiating a regional dialogue focused 
on clarifying existing uncertainties and enhancing the 
compatibility of regional data protection laws.” 


Josh Lee Kok Thong 
Managing Director, FPF Asia-Pacific, Singapore Office 
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APAC Jurisdiction Report Series with the 
Asian Business Law Institute 
On November 30, the Future of Privacy Forum (FPF) and the Asian Business Law Institute 


(ABLI) held a joint event at the 58th APPA Forum to launch Bolancing Organizational 
Accountability and Privacy Self-Management in Asia-Pacific, a detailed comparison of the 


legal bases for processing personal data in 14 jurisdictions in the Asia-Pacific (APAC) region. 


These included Australia, China, India, Indonesia, Hong Kong SAR, Japan, Macau SAR, 
Malaysia, New Zealand, the Philippines, Singapore, South Korea, Thailand, and Vietnam. 
The comparative analysis report builds upon a series of 14 individual reports released 
-throughout 2022 that provide an overview of the legal bases for processing personal data 
~_ in each of these jurisdictions. 
eae >e ` 
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Photos by Silas See (aisilassee) 


Automated Decision-Making Under 
Automated 


Decision-Making the General Data Protection Regulation 
Under.the GDPR: 


PracticalCasts from Courts 
ess Aen n thts FPF launched a comprehensive report analyzing case law 


under the General Data Protection Regulation (GDPR) by 
applying it to real-life cases involving Automated Decision- 
Making (ADM), as protected by Article 22. Drawing from 
over 70 cases and guidance documents across 18 EEA 
Member-States, the U.K., and the European Data Protection 
Supervisor (EDPS), the report outlines how national courts 
and Data Protection Authorities (DPAs) have interpreted and 
applied the relevant EU data protection law provisions on 
ADM so far, before and after the GDPR became applicable. 


Demystifying Data Localization in China 


>is 


This report details China’s data governance framework for DEMYSTIFYING DATA LOCALIZATION 
IN CHINA: A PRACTICAL GUIDE 


data localization and cross-border transfers. It outlines ten 
steps organizations can take before deciding to localize 

or transfer data, with practical advice on how to carry out 
each of them. By examining provisions of relevant laws and 
administrative regulations passed by ministerial departments, 
the report aims to give organizations a better understanding 
of how the transfers framework operates, the expectations 

of Chinese regulatory authorities with respect to such 
transfers, and the specific steps controllers can take for better as 
compliance mapping. 


A ook in DPA ein tne A Look Into Data Protection Authorities’ 
Strategies in the African Continent 


This report gives insight into the activity and plans of African 
Data Protection Authorities (DPAs) from Kenya, Nigeria, South 
Africa, Benin, Mauritius, Côte d'Ivoire, and Burkina Faso. It 

ri also relies on research conducted across several other African 
jurisdictions that have adopted data protection laws in recent 
years but have not yet established a DPA or whose DPAs have 
not published strategic documents in the past two to three years. 
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Building Relationships with Key Stakeholders 
Around the World 


a FPF and FPF's Israel Tech Policy Institute (ITPI) 
DEVELOPMENTS collaborated with the Organization for Economic 
IN OPEN BANKING Cooperation and Development (OECD) to 
K from a Global Perspectv organize a virtual workshop on open banking 
in March 2022. The workshop was designed 
to bring together experts from governments, 
privacy enforcement authorities, banking 
regulators, industry, civil society, and academia 
to explore the challenges of open banking 
and develop strategies for promoting a mix 
of financial inclusion, robust competition, and 
strong protection for data subjects. The workshop was part of the OECD's “Going 
Digital” project, which also included the OECD's Recommendation on Enhancing 
Access to and Sharing of Data, and was part of the OECD's efforts to implement 
the OECD Privacy Guidelines. 


In consultation with FPF Senior Fellow Zoe Strickland, FPF policy staff prepared 
an initial report summarizing the discussions and presentations and identifying 
the key considerations from each session. This report was provided to the OECD 
and contributed to the OECD's February 2023 report Data Portability In Open 
Banking: Privacy and Other Cross-Cutting Issues. 


‘Ada 
Lovelace 
Institute 
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Convening in Brussels on Empowering 
Vulnerable and Marginalized People 


FPF teamed up with the Brussels Privacy Hub of Vrije 
Universiteit Brussel (VUB) to jointly present the sixth 
edition of the Brussels Privacy Symposium. The in- 
person event convened in Brussels, bringing together 
policymakers, academic researchers, civil society, 
and industry representatives to discuss privacy 
research and scholarship. The event marked the 
launch of “VULNERA,’ the International Observatory 
on Vulnerable People in Data Protection, co-led by 
the Brussels Privacy Hub and FPF. 


The VULNERA International Observatory explores 
annvaL BRUSS theories of vulnerability, marginalization, and 
ern any sYMPOS! intersectionality, examining how data protection law 
and policy apply to people in certain contexts that 
may be vulnerable or marginalized, such as women, 
children, people on a low or zero income, racialized 
communities, and people of color, ethnic and 
religious groups, migrants, LGBTQIA+ and non-binary 
people, the elderly, and persons with disabilities. 


brusselsprivacyhub.com/vulnera 


BRUSSELS FUTURE OF 
PRIVACY PRIVACY 
HUB FORUM 
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Participating in the 2022 Global Privacy Assembly 


Global Privacy Assembly (GPA), which brings together the most global data protection 
authorities (DPAs) every year since 1979, took place in Istanbul, Türkiye. FPF was 
invited by the organizers of the 2022 GPA (the Turkish DPA) to host a two-part 

side event during the open session, in addition to a capacity-building workshop for 
regulators during the closed session. FPF moderated panel discussions, bringing 
together experts and thought leaders from academia, government, industry, and law. 


FPF and Singapore’s Personal Data Protection Commission 


FPF and Personal Data Protection Commission (PDPC) co-hosted a workshop as part 
of Singapore's Personal Data Protection Week, titled Data Sovereignty, Data Transfers, 

and Data Protection — Impact on Al and Immersive Tech at Marina Bay Sands Expo and 
Convention Center in Singapore. The event focused on international data transfers and 

their importance to new and emerging technologies. 
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FPF at G20 Seminar in Indonesia: 
Bridging the Digital Divide 


FPF Vice President for Global Privacy Dr. Gabriela Zanfir-Fortuna 
contributed to a high-level G20 side event as a part of Indonesia's G20 
presidency and ahead of the 17th G20 Heads of State and Government 
Summit. The seminar focused on investment gaps and digital divides, 
where Dr. Zanfir-Fortuna discussed privacy and data protection 
regulatory risks. Following the panel, she contributed an analysis titled 
Managing Regulatory Risks: Global Privacy and Data Protection Laws, 
A State of Play to the G20 Infrastructure Working Group's compendium 
on digital infrastructure finance issues and practices. 


FPF at Computers, Privacy, and Data Protection Conference 
— Latin America 2022 


The first-ever in-person Computers, Privacy, and Data Protection Conference — Latin America 
(CPDP LatAm) took place in Rio de Janeiro (Brazil). FPF attended the inaugural event with the 
theme of “Artificial Intelligence and Data Protection in Latin America,” participating in panels 
and submitting a paper for publication, which was recognized as a finalist for the CPDP LatAm 
Danilo Doneda Award and won the Council of Europe’s Stefano Rodota Award. 
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FPF's Israel Tech Policy Institute hosted a 
Cyber Week Conference on Data Protection: 
Predicting and Managing the Path Forward 
during Tel Aviv University’s Cyber Week. 


FPF CEO Jules Polonetsky started the 
conference with a panel on The Future of 
Digital Advertising: Regulators, Platforms, 
and the Path Forward. 
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FPF Issue Areas 


THE IMPACT OF 
OUR ISSUE AREAS 


FPF Expert Research and Analysis 


At a time when industry actors are the custodians of a wide range of 
consumer data, bringing together a diverse swath of stakeholders from 
corporate, advocacy, and academic sectors is critical to making progress 
in data protection efforts. 


FPF resources have showcased the real impacts of emerging 
technologies on privacy protections and shaped best practices and 
policies in the United States and globally. We highlight just a few of our 
reports and infographics below but for more, visit fpf.org/resources. 
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THE ROLE OF DATA PROTECTION 


Safeguarding Sexual Orientation 
and Gender Identity 
Information Report 


FPF released a comprehensive report during 
Pride Month with LGBT Tech analyzing the history 

of privacy violations against LGBTQ+ individuals 

and the resulting consequences and regulatory 
responses. The report examines the current U.S. legal 
environment, identifies important gaps in protection, 
and provides preliminary recommendations for steps 
that organizations and policymakers can take to work 
toward safer, more equitable, and dignified use of 
data with privacy safeguards. 


THE PLAYBOOK 


Data Sharing for Research 


purueror 
avae 
FORUN 


FUTURE, 


DATA SHARING FOR RESEARCH 


THE PLAYBOOK AND INFOGRAPHIC 


The Playbook: Data Sharing for Research & Infographic 


The Playbook provides a set of best practices for instituting research data-sharing 
programs between corporations and research institutions. This report aims to encourage 
safe, responsible data-sharing between industries and researchers. In addition to the 
Playbook, FPF created a companion infographic summarizing the benefits, challenges, 
and opportunities of data sharing for research outlined in the Playbook. 


The FPF Award for Research Data Stewardship is supported by the Alfred P. Sloan 
Foundation, a not-for-profit grantmaking institution whose mission is to enhance the 
welfare of all through the advancement of scientific knowledge. 


A Practical Guide to Video- 
Based Safety Technologies 
in Commercial Vehicle Fleets 


FPF released a report detailing the data 
usage and privacy implications of video- 
based safety systems in vehicles. The report, 
co-authored with Samsara Inc., describes 
how Advanced Driver Assistance Systems 
(ADAS) work in commercial fleets, identifies 
the data used by these systems, and urges 
the adoption of privacy best practices that go 
beyond compliance with existing privacy and 
data processing laws. 


Understanding Extended Reality Technology & Data Flows 


XR Technology Data Flows and Privacy Risks Infographic 


As businesses increasingly develop and adopt extended reality (XR) technologies, 
including virtual (VR), mixed (MR), and augmented (AR) reality, the urgency to consider 
potential privacy and data protection risks to users and bystanders grows. Lawmakers, 
regulators, and other experts are increasingly interested in how XR technologies work, 
what data protection risks they pose, and what steps can be taken to mitigate these 
risks. To inform these key stakeholders, FPF released an infographic visualizing how 
XR data flows work by exploring several use cases that XR technologies may support. 
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YOUTH & EDUCATION 
PRIVACY 


FPF believes there is a balance between the use of data and technology 
that is not antithetical to protecting student privacy. To facilitate this 
balance, FPF equips and connects advocates, industry, policymakers, 

and practitioners with substantive practices, policies, and other solutions 
to address education privacy challenges at both K-12 and in higher 
education. This work is supported by the Bill & Melinda Gates Foundation 
and the Chan Zuckerberg Initiative. 
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Protecting Student Privacy in Higher Education 


Data plays a critical role in 
higher education. Students 
and families, policymakers, 
and institutions need data on 
student access, progression, 
completion, costs, and post- 
college outcomes to inform 

a wide variety of decisions. 
FPF resources such as 

the 


and 


discuss how student privacy is rooted in contextual values and expectations, is critical 
to intellectual freedom, and supports students in their various institutional relationships. 
Also discussed is how higher education institutions can move towards ensuring that 
learning analytics are in alignment with the privacy protections and ethical practices that 
students and other stakeholders expect. 


Student Privacy Train-the-Trainer Program 


Since 2013, over 12 new student privacy laws 
have passed in 42 states, with more bills and 
regulations being rolled out each year. This 


T RAI N W has resulted in many new requirements for 
E local and state education agencies. Some 
state laws include the threat of jail or large 
T R Al N E R fines when school staff unintentionally violate 
student privacy. Unfortunately, few states have 
received funding or support to implement 
these new laws, and without training, none 
of the laws can be implemented with fidelity. Recognizing the demand for practical, 
informed privacy guidance, FPF launched a 10-month Train-the-Trainer pilot program in 


February 2020 to multiply the people on the ground with the capacity to provide basic 
student privacy support. 


@ STUDENT 


PRIVACY 
rites — COMPASS 


Learn more about FPF’s 
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Providing Analysis for Stakeholders 
on Youth & Education Privacy 


As children’s privacy continues to be a top priority and area of interest among lawmakers, 
companies, and the public, FPF tracks developments on behalf of these stakeholders on 
youth privacy both at the state and federal levels. 


Comparative Analysis of 
Federal Child Privacy Bills 


This policy brief looks at the child-centric 
privacy bills that were introduced in the 
17th Congress. The resource compares 
four proposed bills against each other (with 
additional comparisons to current law) on 
key elements, including the age group they 
seek to protect, enforcement mechanisms, 
covered entities, notice requirements, 
verifiable consent, restrictions on the use of 
personal information (Pl), and more. 


Analysis of California’s 
Age-Appropriate Design 
Code Act 


The report outlines and analyzes 
Assembly Bill 2273, the California Age- 
Appropriate Design Code Act (AADC), a 
first-of-its-kind privacy-by-design law that 
represents a significant change in both 
the regulation of the technology industry 
and how children will experience online An Analysis of the California 
products and services. ‘Aare Dermott Desi Goce 
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Comparative Analysis of 
California and U.K. Age-Appropriate 
Design Codes 


The brief compares the California Age-Appropriate 
Design Code Act (AADC), a first-of-its-kind privacy- 
by-design law in the United States, and the United 
Kingdom's Age-Appropriate Design Code. The report 
contains a side-by-side comparison of the 15 standards 
laid out in the UK AADC to the corresponding text of 
the California AADC, including the “best interests of 
the child” standard, age assurance, default settings, Guja the Uk ed cults 
parental controls, enforcement, and data protection ‘Age-Appropriate Design Codes 
impact assessments. ee 


Utah Leads the Way 
in Protecting Student Privacy: 


Utah Case Study in K-12 Privacy Best Practices 


Student data privacy concerns continue to be a central issue for policymakers, as 
well as schools, parents, and children. Utah's State Board of Education's efforts 

to collaborate at the state and district level demonstrate how states can address 
these concerns by creating a privacy-focused culture within the education system. 


FPF's case study, Utah Leads the Way in Protecting Student Privacy: A Case Study 
in K-12 Privacy Best Practices provides an overview of Utah's key student privacy 
policies and the main stakeholders involved in the system, as well as an analysis of 
the strategies and tactics that can serve as a model for other states. 
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FPF Membership and Special Events 


SUPPORTING SENIOR 
PRIVACY LEADERS AT 
LEADING ORGANIZATIONS 


FPF provides privacy and data protection executives across diverse 
industries globally with a platform to discuss business practices alongside 
other leading experts. These executives also have the opportunity to 
collaborate with FPF’s in-house experts to advance the development of best 
practices in addressing complex and high-stakes data protection issues. 


As legislation and regulations evolve and impact a company's operations, 
FPF provides detailed compliance-focused legislative tracking and analysis 
to enable our 204 member organizations to position themselves for future 
opportunities and challenges. 
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2022 Annual Advisory Board Meeting 


Every year, FPF gathers its Advisory Board members for peer learning, networking, and 
sessions led by FPF experts at its Advisory Board meeting outside of Washington, D.C. 
At the 2022 meeting, nearly 90 members gathered to hear expert analysis and discuss 
topics such as State and Federal Legislative Issues, Data Protection to Data Governance, 
Data and the Future of Work, Immersive Tech, and the Future of Advertising. 


FPF Member Meetings 
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FPF Members at 
Israel Cyber Week 


FPF's Israel Tech Policy Institute welcomed 
a delegation of trailblazing privacy 
professionals from around the world to 
participate in Tel Aviv University’s Cyber 
Week conference and to meet with 
cybersecurity experts, industry leaders, 
startups, investors, academics, and 
government officials. 
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FPF IN THE MEDIA 


FPF Experts in the Media 


“Many corporate privacy lapses in recent years 
have revolved around the ways companies 
exchange data with third parties,” said John 
Verdi, senior vice president of policy at the 
Future of Privacy Forum, a Washington think 
tank. “Governments may need to pass new 
laws, or update guidance on existing statutes, 
such as the EU's General Data Protection 
Regulation, once a metaverse-shaped data 
economy comes into focus.” 


The court ruling “raises a lot of practical 
complexities and a lot of difficulty in understanding 
if the data [organizations] have is sensitive or not,” 
said Dr. Gabriela Zanfir-Fortuna, vice president for 
global privacy at the Future of Privacy Forum, a 
think tank based in Washington, D.C. 


2022 MEDIA STATS 


195+ 114+ 


Media Stories 


“With data like this, | fear all social media 
companies (not just Insta) will pursue a 
TikTok model. Beyond dark patterns/child 
center design, how can the government 
promote health for social development? 
Will changing ad tech incentives deliver 
on this? Hard questions for free market 

said chief executive officer of the 
Future of Privacy Forum, Jules Polonetsky. 


Amie Stepanovich, vice president of U.S. 
policy at the Future of Privacy Forum, a 
nonprofit focused on data privacy and 
protection, said “warrants and subpoenas 
can be accompanied by gag orders, which can 
prevent companies from even alerting their 
customers that they're being investigated.” 


559,655,660 


impressions* 


Quotes from FPF 


“Estimation based 


Bee cincicase ||| @® oo suctes o 
from 2021 in 2021 likely higher. 
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3,000 NEW 


Twitter followers 


0 11.5% increase from 2021 


6,000 NEW 


LinkedIn followers 


© 400K+ impressions 


9i, Future of Privacy Forum 
EE ofutureofprivacy 


Join FPF for the 12th Annual Privacy Papers for Policymakers Award 
virtual event on February 10. The winning authors wil join FPF staff to 
present their work at an event with policymakers from around the world, 
‘academics, & industry privacy professionals. 


eventbritecom 


12h Annual Privacy Papers for Policymakers 
12th Annual Privacy Papers for Policymakers 


Canama 1 re conv tach ana 1e tech a ea iE 


ua our A mith Jaen ter Wathough an ta ria Fae wl ay 
‘cy bared mere esr ee 


January 13, 2022 


2022's most engaged tweet was a call 
for the public to join the Future of Privacy 
Forum for its 12th Annual Privacy Papers 
for Policymakers Virtual Ceremony 


July 14, 2022 


2022's most engaged LinkedIn post was 
the announcement of Josh Leek Kok Thong 
being appointed as the new Managing 
Director for the FPF Asia Pacific office 


STAY CONNECTED 


by Following FPF on Social Media 


FUTURE OF PRIVACY FORUM 


© @futureofprivacy 


@futureofprivacy 


lin] Future of Privacy Forum 


BOARD OF DIRECTORS 


The Future of Privacy Forum was founded as a 501c4 but conducted the 
majority of its activities via its affiliated organization, the FPF Education and 
Innovation Foundation, a 501(c)3. 


In December 2022, the two organizations merged, and the FPF Education 
and Innovation Foundation (FPFEIF) is now the only operating entity. 
FPF EIF will use the name “Future of Privacy Forum” for its activities. 


The Future of Privacy Forum is overseen by independent boards of directors. 


Christopher Wolf David Hoffman 


Mary Culnan Elaine Laughlin 


Debra Berlyn Alan Raul 
Anita L. Allen Agnes Bundy Scanlan 
Danielle Citron Dale Skivington 
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Advisory Board 


FPF SUPPORTERS 


FPF brings together a variety of stakeholders from industry, 
academia, and civil society to support our efforts to advance 
principled data practices. We believe varied perspectives 
contribute to a comprehensive understanding of the risks and 
opportunities of new technologies and data uses as well as their 
impact on society now and in the future. 


FPF maintains full control over our projects and priorities, including 
the content of educational programs, written reports, and other 
work products. 


Learn more about our supporters at fpf.org. 


FUTURE OF PRIVACY FORUM 


2022 FINANCIALS 


REVENUE 


Membership & Contributions Grants & Special Projects Registrations & Sponsorships 


TOTAL: $12,185,012 


EXPENSES 


Scar Samaras 


TOTAL: $12,405,660 


NET ASSETS 


Beginning of Year Change in Net Assets 


TOTAL END OF YEAR: $8,545,398 


1) The figures presented here in the form of a Consolidated Statement of Activities are in draft format. They are subject to change 
pending completion of the fiscal year 2022 audit. 


2) Grants & Special Projects revenue includes grant revenue not yet released from restriction. 
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